CISSP · Question #554
A user downloads a file from the Internet, then applies the Secure Hash Algorithm 3 (SHA-3)?
The correct answer is A. It verifies the integrity of the file.. SHA-3 is a cryptographic hash function used to verify data integrity by generating a fixed-length digest that uniquely represents the file's contents. If the computed hash matches the publisher's provided hash, the file has not been altered.
Question
Options
- AIt verifies the integrity of the file.
- BIt checks the file for malware.
- CIt ensures the entire file downloaded.
- DIt encrypts the entire file.
How the community answered
(43 responses)- A91% (39)
- B2% (1)
- C5% (2)
- D2% (1)
Why each option
SHA-3 is a cryptographic hash function used to verify data integrity by generating a fixed-length digest that uniquely represents the file's contents. If the computed hash matches the publisher's provided hash, the file has not been altered.
SHA-3 (Secure Hash Algorithm 3) is a cryptographic hashing algorithm that produces a fixed-size digest (e.g., 256 or 512 bits) from input data. When a user applies SHA-3 to a downloaded file and compares the resulting hash against the hash published by the source, any difference indicates the file was corrupted or tampered with, thereby verifying its integrity.
SHA-3 is a mathematical hashing function, not an antivirus or malware detection engine; it cannot identify malicious code or behavior within a file.
While a hash mismatch can indirectly suggest an incomplete download, SHA-3 itself does not track transfer completeness or byte counts - that is handled by transport-layer mechanisms or checksums like CRC.
SHA-3 is a one-way hash function, not an encryption algorithm; it does not encrypt data or provide confidentiality, as encryption requires a reversible process using a key.
Concept tested: Cryptographic hashing for file integrity verification
Source: https://csrc.nist.gov/publications/detail/fips/202/final
Topics
Community Discussion
No community discussion yet for this question.